PT-2026-1445

Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard system.cgi pages. Attackers can exploit the 'NTP Server IP' parameter with default credentials to execute arbitrary shell commands as root...

EUVD-2006-0382

Malware in sbrugna...

EUVD-2020-22940

Malware in sbrugna...

EUVD-2014-5305

Malware in sbrugna...

EUVD-2019-5498

Malware in sbrugna...

EUVD-2017-11990

Malware in sbrugna...

EUVD-2020-2672

Malware in sbrugna...

EUVD-2020-29850

Malware in sbrugna...

EUVD-2023-34051

Malicious code in bioql PyPI...

EUVD-2025-28603

Malicious code in bioql PyPI...

EUVD-2022-30218

Malicious code in bioql PyPI...

EUVD-2022-39486

Malicious code in bioql PyPI...

EUVD-2023-43728

Malicious code in bioql PyPI...

EUVD-2022-30127

Malicious code in bioql PyPI...

EUVD-2025-4287

Malicious code in bioql PyPI...

Tenda AX3 fromSetSysTime function buffer overflow vulnerability

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a buffer overflow vulnerability, which stems from the ntpServer parameter in the...

CVE-2025-55603

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...

CVE-2025-55603

CVE-2025-55603 affects Tenda AX3 V16.03.12.10_CN. The vulnerability is a buffer overflow in the fromSetSysTime function triggered by the ntpServer parameter, as described across multiple sources (CNVD/CNNVD/RH/NVD). Impact is high: potential instability or crash (DoS) with high confidentiality/in...

CVE-2025-55603

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...

CVE-2025-7553

A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...